Out-of-bounds read in DNS Server allows an unauthorized attacker to disclose information over a network.

Improper access control in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally.

Exposure of sensitive information to an unauthorized actor in Windows Snipping Tool allows an unauthorized attacker to perform spoofing over a network.

Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to disclose information over a network.

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally.

Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an unauthorized attacker to disclose information over an adjacent network.

Improper link resolution before file access ('link following') in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally.

.NET Framework Denial of Service Vulnerability

Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally.

Microsoft Windows Shell contains a protection mechanism failure vulnerability that allows an unauthorized attacker to perform spoofing over a network.

Microsoft Windows Search Component Information Disclosure Vulnerability

Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack.

Buffer over-read in Windows Storage allows an unauthorized attacker to disclose information with a physical attack.

Integer underflow (wrap or wraparound) in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information over a network.

Improper resolution of path equivalence in Windows URL Moniker allows an unauthorized attacker to bypass a security feature over a network.

Heap-based buffer overflow in Windows Volume Shadow Copy allows an unauthorized attacker to elevate privileges with a physical attack.

Out-of-bounds read in Windows Storage Spaces Controller allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows USB Mass Storage Class Driver allows an unauthorized attacker to elevate privileges with a physical attack.

Active Directory Certificate Services (AD CS) Information Disclosure Vulnerability

Missing authorization in Windows Remote Access Connection Manager allows an authorized attacker to perform tampering locally.

Out-of-bounds read in Windows Spaceport.sys allows an unauthorized attacker to disclose information over a network.

Missing release of resource after effective lifetime in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to deny service locally.

Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack.

Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code locally.

Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally.

Use of uninitialized resource in Windows DNS allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally.

Dependency on vulnerable third-party component in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.